The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123602: hickory-dns: The Hickory DNS recursor in all versions of hickory-recursor and in hickory-resolver 0.26.0-beta.1 before 0.26.2…5.9 Medium8.2 HighN/ANov 8, 2026
CVE-2026-123601: hickory-dns: Hickory DNS hickory-proto 0.25.0 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 invert the…6.5 Medium8.3 HighN/ANov 8, 2026
CVE-2026-123600: hickory-dns: Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net 0.26.0-alpha.1 before 0.26.2 contain a DNSSEC…4.8 Medium6.3 MediumN/ANov 8, 2026
CVE-2026-123599: hickory-dns: Hickory DNS hickory-proto before 0.26.0-beta.1 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because…3.7 Low6.3 MediumN/ANov 8, 2026
CVE-2026-123598: hickory-dns: The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hickory-resolver 0.26.0-alpha.1…3.7 Low6.3 MediumN/ANov 8, 2026
CVE-2026-123597: hickory-dns: Hickory DNS hickory-proto 0.25.0-alpha.1 through 0.26.0-alpha.1 and hickory-net before 0.26.2 contain a logic bug in…3.7 Low6.3 MediumN/ANov 8, 2026
CVE-2026-123596: hickory-dns: Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC…8.8 High8.7 HighN/ANov 8, 2026
CVE-2026-123595: hickory-dns: Hickory DNS hickory-proto 0.25 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC…8.8 High8.7 HighN/ANov 8, 2026
CVE-2026-123594: hickory-dns: Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain an NSEC validation…4.8 Medium6.3 MediumN/ANov 8, 2026
CVE-2026-123593: hickory-dns: Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto 0.24.0 through 0.26.0-alpha.1 compare DNSKEY…4.8 Medium6.3 MediumN/ANov 8, 2026
CVE-2026-123592: hickory-dns: The hickory-net crate in Hickory DNS 0.26.0-beta.1 before 0.26.2 allows DNSSEC validation bypass because Name's Hash…5.9 Medium8.2 HighN/ANov 8, 2026
CVE-2026-123591: hickory-dns: Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 fail to verify, per RFC…5.9 Medium8.2 HighN/ANov 8, 2026
CVE-2026-123590: hickory-dns: Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 accept NSEC and NSEC3…4.8 Medium6.3 MediumN/ANov 8, 2026
CVE-2026-123589: hickory-dns: The DNS-over-QUIC (DoQ) server in hickory-server (hickory-dns) before 0.26.2 does not apply any timeout when reading a…5.3 Medium6.9 MediumN/ANov 8, 2026
CVE-2026-123588: hickory-dns: The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before…7.5 High8.7 HighN/ANov 8, 2026
CVE-2026-123587: hickory-dns: The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies wraparound NSEC records by…6.8 Medium8.9 HighN/ANov 8, 2026
CVE-2026-123586: hickory-dns: Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which…7.5 High8.7 HighN/ANov 8, 2026
CVE-2026-123585: hickory-dns: The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving…5.3 Medium6.9 MediumN/ANov 8, 2026
CVE-2026-123584: hickory-dns: The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an error when a client UDP…5.9 Medium8.2 HighN/ANov 8, 2026
CVE-2026-123583: hickory-dns: The recursive resolver in Hickory DNS hickory-recursor 0.25.0 through 0.25.2 and hickory-resolver 0.26.0 before 0.26.2…3.7 Low6.3 MediumN/ANov 8, 2026
CVE-2026-123582: hickory-dns: The validating recursive resolver and validating forwarder in Hickory DNS (hickory-server) 0.25.0 before 0.26.2 do not…3.7 Low6.3 MediumN/ANov 8, 2026
CVE-2026-123581: hickory-dns: Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC…5.3 Medium6.9 MediumN/ANov 8, 2026
CVE-2026-123580: hickory-dns: Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 perform insufficient…7.5 High8.7 HighN/ANov 8, 2026
CVE-2026-123579: hickory-dns: DNSSEC validation in Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 does…3.7 Low6.3 MediumN/ANov 8, 2026
CVE-2026-123578: hickory-dns: Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP…3.7 Low6.3 MediumN/ANov 8, 2026
176-200 of 418627